Network Security

vpdn commands in 7.0 asa

hows the going lads,We are about to purchase a new ASA 5505 but it will be behind a netopia DSL router . The netopia will be put into bridge mode and the vpdn configuration will be applied to the ASA.However I have read that the VPDN commands has bee...

Resolved! IPS stopping TACACS packets

Hi All,This is my scenario, Switch--FirstIntPair--PIXInside--PIXOutside--SecondIntPair--Hub--Internetrouter.I have two interface pairs(please don't ask me why). One between core switch and pix inside interface and another between pix outside and inte...

PIX 7.0 inspect

As you are all aware, by default the 'inspect sqlnet' feature is switched on under the global policy map on PIX v7 firewalls. I would like to keep the 'inspect sqlnet' feature on at the global policy level, but turn it off for traffic travelling betw...

message with show conn in pix

Hi Following is message with show conn in the pix525,ver 7.0. x.x.x.x is email server ip address. I don't think have 4g email send out in that time. How to understand this message? that source ip address is changed as time."TCP out 62.37.236.x:25 i...

ERROR: access-list has protocol or port

Hi there, I have an ASA 5510 version 7.0(4). I have a problem with the nat0 , at some point of time my nat0 line on the inside interface simply dissappears . When i try to add it again it gives me an error ERROR: access-list has protocol or port . No...

AIP-SSM AAA Authentication?

I was wondering if the AIP-SSM module on a ASA 5510 or 5540 can authenticate users against a Tacacs+ server? If so can you configure it so you can use ssh to login on to the device with authentication through Tacacs+?I have my ASA set up so I can ss...

4250SX module and cat6509 SFP style connector

Are there any foreseen problems or limitations around plugging a 4250 SX sensor into a MSFC3 Daughterboard with Full-duplex, 1000Mb/s, media type is SX configured as SFP connector?

Resolved! PIX 515e Static NAT/DMZ Issue

I have a 515e, 6.3(4) with an internal interface and a DMZ. The DMZ interface is 10.0.20.1 and the outside interface is 69.xxx.yyy.188/28I have setup a web server which is currently the only device in the DMZ. I need to make a static mapping to this...

pix515E and FO unit

Hi,I have a pix515E with a VAC. My question is, if I buy a FO-unit, should this unit have a VAC too, or is it possible to have a FO-unit with a VAC+ ?Thanks,Stella

Resolved! pix 506e: how to purchase console cable

Hello,I have a pix 506e. I want to purchase another console cable. The one I have now is what looks like an RJ-45 (but not) and one end is an "RJ-45" to 25-pin serial adapter. The wires in this thing are,starting from 1, BLU, ORN, BLA,RED,GRN,YLW,BRW...

Resolved! ASA 5510 VPN and DMZ issue

I have an ASS5510 with 3 interfaces, External, Internal, and DMZ. I have configured a mail server in the DMZ and I can get to it from the external interface and from the internal interface.External access is a simple NAT..static (outside,dmz) 192.16...

dead-peer detection in lan-lan IPSec tunnels between pixes or asas

We have a site which wants to connect back to our main office from an ASA running v7.2 via two different IPSec tunnels - one on the ASA's outside interface and one on its dmz. They want to set it up so that if the tunnel on the outside interface goe...

PIX 515 static problems

HiI've got a question about static mappings on a PIX515E running OS 6.3(5).My scenario:There are two inside LANs attached to the PIX each of which have a static mapping to the outside interface for the whole subnet.eg static (inside,outside) 10.10.10...

Resolved! Cisco Pix 6.3 inbound access without "statics"

Having some difficulties with a pix 6.3facing the task to provide inbound onnections from lower security interfaces to several network segments behind the Pix's inside interface.I'm not sure what my options are to provide translations for inbound con...